$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer File: Oc4JWSydphzAPD0ySnxsrEd3zM8.cer (raw, json) Hash identifier: S6gf9PrYnhycq4/hDD6F8PE3u2R/hwfpXe/UG81tlHA= Subject key identifier: 39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 4B0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 May 2025 01:37:36 +0000 Certificate not after: Fri 15 May 2026 01:30:03 +0000 Subordinate resources: IP: 2400:3800::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 18:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19212 (0x4b0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:37:36 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:47:1f:41:31:e8:de:b5:89:fc:49:fb:43:0e: ea:af:8a:d2:82:02:bd:7c:f5:cb:56:48:3f:3e:7c: 8b:cd:c5:58:02:94:77:13:63:f8:b5:3e:41:f8:7e: 32:ea:f3:ed:51:07:3a:cf:22:85:95:28:35:ec:fe: 62:eb:5e:ae:75:a9:1d:0e:7f:f0:ac:ae:f2:a2:e7: 1f:fb:03:e8:78:29:4c:67:cd:c3:56:d3:16:e8:e7: 17:74:b0:13:4b:3d:50:69:0c:c0:15:e6:85:62:59: 40:65:90:a3:49:7a:96:ee:21:ef:ee:c9:d9:3c:1f: 93:bd:3e:f8:c8:4d:5e:52:28:6a:7b:4a:d6:ad:7b: 81:77:23:02:e0:de:d4:d1:a2:c7:b2:7b:e1:61:27: b4:b6:5d:9d:88:dd:ae:2e:14:07:5b:8a:41:cc:26: 31:bb:34:df:73:7b:42:31:d2:96:fb:78:06:24:a0: 3f:fe:6e:1a:d5:a6:12:45:32:99:fd:ca:ab:af:5a: f2:81:92:61:6e:ab:99:40:2c:65:9d:5d:4e:8e:05: 51:ec:a9:97:46:64:f5:ad:89:09:8b:3c:c0:54:b2: e0:68:15:43:10:8d:99:06:b8:d2:c6:1d:b9:e2:7e: 33:9c:17:cb:ff:a2:c3:e1:d2:0f:56:88:07:f6:4a: 0c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:3800::/32 Signature Algorithm: sha256WithRSAEncryption 94:a2:02:e8:af:f0:ce:ec:06:8b:9d:12:2f:1c:1f:0d:b8:df: f0:cd:17:c1:1a:a1:80:01:58:a8:1f:bd:fb:10:b2:b7:d0:71: f9:61:ae:7e:ad:ed:8a:02:18:73:d7:37:5f:9a:42:12:c0:f8: a0:64:ab:f8:47:71:33:ba:24:c8:58:6e:97:d4:9a:bb:bf:07: 55:ea:9d:30:90:cf:a8:ed:0f:54:8a:91:76:1a:bc:ea:95:f6: f6:c6:d3:0c:27:6a:9b:55:61:fc:9e:8b:b4:c2:96:15:e7:65: fa:74:ed:8f:60:cd:30:c6:e4:a4:8d:f6:f7:f1:f7:16:43:f8: 35:d2:3c:60:f7:33:7e:8e:5a:4b:52:d0:ed:72:ab:3f:54:5b: 0f:47:c4:66:2f:68:bb:d6:c2:3a:58:8a:12:8a:26:c5:a4:e5: ed:21:c6:fe:de:d6:85:4f:8c:c4:f4:d1:4c:0c:19:72:53:a5: d0:60:b3:7d:8d:8a:59:e5:e2:2d:2a:59:72:84:04:36:36:f5: 1a:72:96:42:54:ca:1f:92:74:59:5a:79:be:b2:ec:de:e0:5f: fe:00:c9:d4:cf:39:bc:81:24:c0:d3:10:62:e0:a2:7c:ed:52: c2:c0:a9:01:35:3b:9b:88:f6:38:a5:14:47:b2:c7:30:62:35: 23:1a:dc:a5 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICSwwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDUxNTAxMzczNloXDTI2MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoMzlDRTA5NTkyQzlEQTYxQ0MwM0MzRDMyNEE3QzZDQUM0Nzc3Q0ND RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ5HH0Ex6N61ifxJ+0MO 6q+K0oICvXz1y1ZIPz58i83FWAKUdxNj+LU+Qfh+Murz7VEHOs8ihZUoNez+Yute rnWpHQ5/8Kyu8qLnH/sD6HgpTGfNw1bTFujnF3SwE0s9UGkMwBXmhWJZQGWQo0l6 lu4h7+7J2Twfk70++MhNXlIoantK1q17gXcjAuDe1NGix7J74WEntLZdnYjdri4U B1uKQcwmMbs033N7QjHSlvt4BiSgP/5uGtWmEkUymf3Kq69a8oGSYW6rmUAsZZ1d To4FUeypl0Zk9a2JCYs8wFSy4GgVQxCNmQa40sYdueJ+M5wXy/+iw+HSD1aIB/ZK DIcCAwEAAaOCAowwggKIMB0GA1UdDgQWBBQ5zglZLJ2mHMA8PTJKfGysR3fMzzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxMDIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTAyL09j NEpXU3lkcGh6QVBEMHlTbnhzckVkM3pNOC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkADgAMA0GCSqGSIb3 DQEBCwUAA4IBAQCUogLor/DO7AaLnRIvHB8NuN/wzRfBGqGAAVioH737ELK30HH5 Ya5+re2KAhhz1zdfmkISwPigZKv4R3EzuiTIWG6X1Jq7vwdV6p0wkM+o7Q9UipF2 Grzqlfb2xtMMJ2qbVWH8nou0wpYV52X6dO2PYM0wxuSkjfb38fcWQ/g10jxg9zN+ jlpLUtDtcqs/VFsPR8RmL2i71sI6WIoSiibFpOXtIcb+3taFT4zE9NFMDBlyU6XQ YLN9jYpZ5eItKllyhAQ2NvUacpZCVMofknRZWnm+suze4F/+AMnUzzm8gSTA0xBi 4KJ87VLCwKkBNTubiPY4pRRHsscwYjUjGtyl -----END CERTIFICATE-----Generated at Sun May 18 21:27:10 2025 by rpki-client